Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: LAQEIe97pcBFsH/EKlOuRUbKbO5oZA4/hz81PK0ST1I=
Subject key identifier: 8F:0A:E8:15:B1:15:5D:9B:3A:BC:10:65:6D:59:6D:24:74:E9:98:FA
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019FACACC5A2704BC487D2340287947AD804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 10AC
Signing time: Wed 29 Jul 2026 07:00:31 +0000
Manifest this update: Wed 29 Jul 2026 07:00:31 +0000
Manifest next update: Thu 30 Jul 2026 07:00:31 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 75IzZd7ZI0EpdGNn4rHS5Bk0jw74woY2RxoFAiZ/3hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:c5:a2:70:4b:c4:87:d2:34:02:87:94:7a:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Jul 29 07:00:31 2026 GMT
Not After : Jul 30 07:00:31 2026 GMT
Subject: CN=8f0ae815b1155d9b3abc10656d596d2474e998fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e9:c9:46:ce:5a:c9:22:a7:0f:ce:3f:62:7c:
b2:48:3a:91:95:e8:7e:0f:45:8a:66:f4:1a:1f:e6:
29:a2:99:20:29:81:ed:06:d1:69:8a:75:ac:2b:64:
39:19:a0:7a:cc:d5:fc:b2:74:07:69:2d:35:56:75:
47:41:54:63:7c:20:1f:97:3c:74:63:95:cc:cc:3e:
01:77:6b:ec:b5:84:7a:70:90:25:50:42:92:85:af:
c8:aa:b8:04:1d:50:dc:bf:bf:fd:6e:4e:4d:2d:c4:
61:3c:9c:88:56:41:9f:95:53:a9:91:74:d5:4f:cd:
be:7e:60:1c:c9:7f:6b:84:45:80:7c:c5:49:ee:78:
63:c7:ce:70:eb:ba:c9:f0:b9:66:64:a6:83:03:c6:
cb:12:e9:34:c7:ed:dd:69:ff:fc:86:aa:73:ce:43:
fa:b7:7b:da:1d:b0:4c:92:8d:6d:71:3d:fb:d2:f2:
08:03:e7:2c:ed:d1:3d:35:70:9b:6a:ac:71:cc:8c:
d1:a1:a7:23:3b:7f:5a:58:84:3c:4f:9e:2a:bf:2b:
85:62:69:db:b6:9c:ea:11:ba:9e:0d:4b:63:58:98:
10:52:89:4a:d8:22:8c:e1:3c:54:1a:92:78:cf:2c:
31:36:77:60:7f:06:af:3f:c6:c9:46:05:91:b0:98:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:E8:15:B1:15:5D:9B:3A:BC:10:65:6D:59:6D:24:74:E9:98:FA
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:b4:a9:14:f5:25:be:df:93:fb:46:85:0d:5d:40:eb:13:
26:9d:a3:58:df:65:7e:cd:70:3c:eb:27:a7:4a:10:28:41:97:
9a:7d:f2:f2:2a:6e:01:8b:32:de:e5:d3:56:8b:ca:1f:89:79:
a7:a0:52:81:f7:20:f7:d9:7e:ac:c4:78:02:57:02:6b:b9:4c:
10:19:f1:be:56:06:ab:29:d1:4f:1e:f0:47:25:a0:1b:f8:42:
21:37:d8:b4:83:b3:5e:bd:1b:48:dc:55:ab:b5:8d:fd:4d:d3:
c9:df:37:e1:68:e0:b5:7d:96:99:04:a0:30:69:c7:d2:0b:49:
30:51:36:47:e3:77:6c:fd:0d:15:7a:1a:d3:98:cb:20:e3:71:
df:8f:03:2e:0b:4d:3d:12:d0:52:e0:dd:ab:6e:d5:d6:6d:cd:
85:aa:a8:ae:cd:f4:6d:86:8c:44:29:be:b1:6d:94:0a:b4:44:
21:cf:95:04:0a:3a:5c:a5:d7:da:59:6c:1d:5e:9a:95:a3:2c:
a6:0d:94:21:b2:cc:7d:4b:a8:5f:b5:54:ce:53:72:6a:b8:ba:
59:53:06:6f:3a:1f:b8:42:01:a6:fc:a2:4e:78:cb:f8:e9:42:
dc:99:6a:2f:a7:83:ae:42:d7:31:93:c5:8e:c7:a1:b4:d6:93:
01:43:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:20 2026 by rpki-client